feat: Add dependency graph generation and OSO integration#1241
Draft
feat: Add dependency graph generation and OSO integration#1241
Conversation
Add comprehensive dependency graph generation system for py-libp2p: Scripts: - generate_dependency_graph.py: Generate direct dependency graphs - generate_transitive_dependency_graph.py: Generate full transitive dependency trees - integrate_oso.py: Integration script for Open Source Observer (OSO) API Documentation: - Complete documentation in docs/dependency_graph/ - OSO integration guide and information - Preview and usage instructions - Structure analysis and summary Features: - Multiple output formats: JSON, DOT, Mermaid, Markdown, PNG, SVG - Direct and transitive dependency visualization - OSO API integration support - Generated files excluded from git (can be regenerated) The dependency graphs can be used with OSO (Open Source Observer) for dependency analysis, security tracking, and ecosystem insights.
Move OSO health reporting into a package-first observability module with canonical CLI entrypoints, and reorganize operational scripts/docs to a clearer production-oriented structure. This makes maintenance workflows more reliable by aligning script paths, CI, tests, and docs around a single source of truth. Made-with: Cursor
Add explicit report notes clarifying that current OSV checks are package-name based and may over-report without version matching, so maintainers interpret the signal as experimental. Made-with: Cursor
Add report output patterns to gitignore and refresh generated dependency markdown formatting from latest graph generation. Made-with: Cursor
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Add comprehensive dependency graph generation system for py-libp2p:
Scripts:
Documentation:
Features:
The dependency graphs can be used with OSO (Open Source Observer) for dependency analysis, security tracking, and ecosystem insights.
What was wrong?
Issue #
How was it fixed?
Summary of approach.
To-Do